LISTING OF CLAIMS 

1. (Original) A method comprising: 

associating cryptography information with a data packet to be used to perform 
cryptography operations on the data packet; 

storing the cryptography information in memory; 

generating a pointer to a memory location for the cryptography information; 
passing the pointer to the cryptography information from a first system layer to a second 
system layer; 

accessing the cryptography information not stored in the second system layer using the 
pointer; 

performing cryptography operations on the data packet; and 
transmitting the data packet. 

2. (Original) The method of claim 1 wherein the first system layer comprises an 
intermediate driver agent. 

3. (Original) The method of claim 1 wherein the second system layer comprises a base 
driver agent. 

4. (Original) The method of claim 1 wherein the cryptography information comprises one or 
more of: a unique identifier, a network protocol associated with the data packet, a security 
parameter index, cryptographic keys, a source identifier, and a destination identifier. 

5. (Original) The method of claim 1 wherein the cryptography information comprises a 
security association. 

6. (Original) The method of claim 1 wherein the pointer is used to cache the cryptography 
information on network hardware. 
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7. (Original) The method of claim 1 wherein accessing the cryptography information not 
stQred in the second system layer is performed by the second system layer to populate a 
cryptography information table. 

8. (Original) The method of claim 7 wherein the population of the cryptography information 
table is performed when cryptography information for the data packet is needed for network 
hardware to perform cryptography operations on the data packet. 

9. (Withdrawn) A method comprising: 
receiving a data packet; 

associating cryptography information with the data packet, the cryptography information 
to be used to perform cryptography operations on the data packet; 

generating a message indicating that the cryptography information necessary to perform 
cryptography operations on the data packet is not stored in a cryptography information table; and 

passing the message from a first system layer to a second system layer. 

10. (Withdrawn) The method of claim 9 wherein the first system layer comprises a base 
driver agent. 

11. (Withdrawn) The method of claim 9 wherein the second system layer comprises an 
intermediate driver agent. 

12. (Withdrawn) The method of claim 9 wherein the cryptography information comprises 
one or more of: a unique identifier, a network protocol associated with the data packet, a security 
parameter index, cryptographic keys, a source identifier, and a destination identifier. 

13. (Withdrawn) The method of claim 9 wherein the cryptography information comprises a 
security association. 
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14. (Withdrawn) The method of claim 9 further comprising the second system layer passing 
cryptography information to the first system layer to populate the cryptography information 
table. 

15. (Withdrawn) The method of claim 14 wherein the second system layer passing 
cryptography information to populate the cryptography information table occurs only as the 
cryptography information is needed to perform cryptography operations on a data packet. 

16. (Withdrawn) The method of claim 9 wherein passing the message causes the second 
system layer to determine which of multiple methods of data packet processing should be used to 
process the data packet 

17. (Currently Amended) An article comprising a machine - acces s ibl e storage medium to 
provide machine-readable instructions that, when executed, cause one or more electronic systems 
to: 

associate cryptography information with a data packet to be used to perform 
cryptography operations on the data packet; 

store the cryptography information in memory; 

generate a pointer to a memory location for the cryptography information; 
pass the pointer to the cryptography information from a first system layer to a second 
system layer; 

access the cryptography information not stored in the second system layer using the 
pointer; 

perform cryptography operations on the data packet; and 
transmit the data packet. 
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18. (Original) The article of claim 17 wherein the pointer is used to cache the cryptography 
information on network hardware. 

19. (Original) The article of claim 17 wherein accessing the cryptography information not 
stored in the second system layer is performed by the second system layer to populate a 
cryptography information table. 

20. (Original) The article of claim 1 9 wherein the population of the cryptography information 
table is performed when cryptography information for the data packet is needed for network 
hardware to perform cryptography operations on the data packet. 

21. (Withdrawn) An article comprising a machine-accessible medium to provide machine- 
readable instructions that, when executed, cause one or more electronic systems to: 

receive a data packet; 

associate cryptography information with the data packet, the cryptography information to 
be used to perform cryptography operations on the data packet; 

generate a message indicating that the cryptography information necessary to perform 
cryptography operations on the data packet is not stored in a cryptography information table; and 

pass the message from a first system layer to a second system layer. 

22. (Withdrawn) The article of claim 21 further comprising the second system layer passing 
cryptography information to the first system layer to populate the cryptography information 
table. 

23. (Withdrawn) The article of claim 22 wherein the second system layer passing 
cryptography information to populate the cryptography information table occurs only as the 
cryptography information is needed to perform cryptography operation on the data packet. 



Application No.: 09/895,061 
Attorney Docket No.: 42390P1 1388 



-5- 



Examiner: J. Lipman 
Art Unit: 2134 



24. (Withdrawn) The article of claim 21 wherein passing the message causes the second 
system layer to determine which of multiple methods of data packet processing should be used to 
process the data packet. 
25-32. (Canceled) 

33. (Original) An apparatus comprising a first system layer coupled to a second system layer, 
the first system layer to store cryptography information in memory, and to generate and to pass 
to the second system layer a pointer to cryptography information stored in memory, the 
cryptography information necessary to perform cryptography operations on a data packet, the 
second system layer to access the cryptography information not stored in the second system layer 
using the pointer. 

34. (Original) The apparatus of claim 33 wherein the first system layer comprises an 
intermediate driver agent. 

35. (Original) The apparatus of claim 33 wherein the second system layer comprises a base 
driver agent. 

36. (Original) The apparatus of claim 33 wherein the pointer is used to cache the 
cryptography information on network hardware. 

37. (Original) The apparatus of claim 33 wherein accessing the cryptography information not 
stored in the second system layer is performed by the second system layer to populate a 
cryptography information table. 

38. (Original) The apparatus of claim 37 wherein the population of the cryptography 
information table is performed when cryptography information for the data packet is needed for 
network hardware to perform cryptography operations on the data packet. 
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39. (Withdrawn) An apparatus comprising a first system layer coupled to a second system 
layer, the first system layer to generate a message indicating that cryptography information 
necessary to perform cryptography operations on a data packet is not stored in a cryptography 
information table, and to pass to the second system layer the message. 

40. (Withdrawn) The apparatus of claim 39 wherein the first system layer comprises a base 
driver agent. 

41. (Withdrawn) The apparatus of claim 39 wherein the second system layer comprises an 
intermediate driver agent. 

42. (Withdrawn) The apparatus of claim 39 further comprising the second system layer 
passing cryptography information to the first system layer to populate the cryptography 
information table. 

43. (Withdrawn) The apparatus of claim 42 wherein the second system layer passing 
cryptography information to populate the cryptography information table occurs only as the 
cryptography information is needed to perform cryptography operations on the data packet. 

44. (Withdrawn) The apparatus of claim 39 wherein passing the message causes the second 
system layer to determine which of multiple methods of data packet processing should be used to 
process the data packet. 
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